last executing test programs: 14.446228846s ago: executing program 4 (id=845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)={0x1c, 0xd, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0x20004080) 14.272312101s ago: executing program 4 (id=846): open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) read$FUSE(r0, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r3, r0, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r4, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) 14.227032545s ago: executing program 3 (id=847): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, 0x0, 0x30) connect$unix(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x1000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0x3) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(morus1280)\x00'}, 0x58) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) r5 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000300)=@IORING_OP_MADVISE={0x19, 0x50, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x16}) io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x0) 13.252034082s ago: executing program 4 (id=848): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) syz_emit_ethernet(0x7a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x9, @private, @local, {[@cipso={0x86, 0x6}, @cipso={0x86, 0x29, 0x0, [{0x0, 0x6, "4b6cefc5"}, {0x0, 0x7, "df61168c24"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0x7, "f7d11634ee"}, {0x0, 0x5, "02a209"}]}, @timestamp={0x44, 0xc, 0x56, 0x0, 0x0, [0x0, 0x0]}]}}}}}}}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x6, 0x4000) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 13.007856773s ago: executing program 3 (id=849): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) chdir(0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x4000, &(0x7f0000000280)={[{@dax_always}, {@block_validity}]}, 0x0, 0x4bc, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read$FUSE(0xffffffffffffffff, &(0x7f00000009c0)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r2, r0}}, 0x18) 12.518907487s ago: executing program 3 (id=851): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r5, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32, @ANYBLOB], 0x10) 11.427651374s ago: executing program 3 (id=852): r0 = userfaultfd(0x801) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() 8.576463197s ago: executing program 0 (id=863): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r5, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x10) 8.536361281s ago: executing program 3 (id=864): socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000100), 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c6e66732c73686f72746e616d653d77696e6e742c726f6469722c696f636861727365743d6b6f69382d72752c73686f72746e616d653d6d697865642c757466383d302c756e695f786c6174653d312c756e695f786c6174653d312c006a4fcfcc9fc5ea902e1a6384d405e843e1dfa18259eaaba553a63617a0f84fae66f4a8121e2cea67640f61a98cef24cdbc0121ddb0212c7365c895e70775f8c82357782f45acff678373e50747f0dbd34a6c51a45f248402fd4340c0024ca0eef9f5fd9133d9e31dd6f105e2696137379613fb63ef2a91ccf785af00684cfa440b01bda2cbcd1b326a0ee91991ebfbd00ec2a75ac8d59d1e7793dfb73a16dd3b166bc6a158528f"], 0x1, 0x26c, &(0x7f0000000840)="$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") r0 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r0, 0x0, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='memory.events.local\x00', 0x26e1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x143042, 0x0) 7.503836622s ago: executing program 0 (id=866): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') r1 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = io_uring_setup(0xc29, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000040)={0x14, &(0x7f0000000200)={0x0, 0x24, 0x4f, {0x4f, 0x22, "91c2389143ad887514ee5d814a3bdb139a42c4ca7c997909b1c93f1f7ab46437a8781c122f72e4e61007ea5154d74502eb920fbdc63fbba5c64e485973ee27651f55313c446ea4a16079b773e1"}}, &(0x7f0000000340)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) 7.237930066s ago: executing program 4 (id=867): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r5, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 6.060716081s ago: executing program 1 (id=868): r0 = syz_open_dev$radio(0x0, 0x1, 0x2) write$binfmt_script(r0, 0x0, 0x0) close(0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r1, 0x0, 0x0) getpeername(r1, 0x0, &(0x7f0000000100)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) inotify_init() ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x3) setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0x4e21, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01fca2712c1c941e1cdafbbb43f09c70", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x4004743a, &(0x7f0000000080)=0x200020) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x1a) 5.586191073s ago: executing program 1 (id=869): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x7c, r2, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x5f, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0xf, 0x5}}, 0x1, @default, 0x3800, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @void, @void, @val={0x25, 0x3, {0x1, 0x8}}, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0xe2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @void, @val={0x76, 0x6, {0x3, 0x4, 0x2f, 0x6}}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 5.385831691s ago: executing program 4 (id=870): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) getpid() openat$sysfs(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/fscaps', 0x101000, 0x3) r0 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r4 = fanotify_init(0x81, 0x40000) fanotify_mark(r4, 0x105, 0x40001032, r3, 0x0) read$FUSE(r4, &(0x7f0000002300)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0xfffffffffffffd82) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) 5.315761547s ago: executing program 1 (id=872): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x5000, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)}, {0x0}], 0x2, 0x0, 0x0, 0x60000000}, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r5 = fsopen(&(0x7f00000001c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = syz_open_pts(r0, 0x101300) ioctl$TIOCSCTTY(r6, 0x540e, 0x3f) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)) open$dir(&(0x7f0000000000)='./file0\x00', 0x4000, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x8000}) 4.259438521s ago: executing program 0 (id=873): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x5000, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)}, {0x0}], 0x2, 0x0, 0x0, 0x60000000}, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r5 = fsopen(&(0x7f00000001c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = syz_open_pts(r0, 0x101300) ioctl$TIOCSCTTY(r6, 0x540e, 0x3f) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)) open$dir(&(0x7f0000000000)='./file0\x00', 0x4000, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x8000}) 4.206957705s ago: executing program 1 (id=874): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000400), 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, 0x0, &(0x7f0000000000)=""/1, 0x2}, 0x20) bpf$PROG_LOAD(0x2, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x800840, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x122a, &(0x7f0000001840)="$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") ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000001ac0)={0x0, 'veth0_vlan\x00', {0x3}, 0x4006}) 3.704044871s ago: executing program 1 (id=876): r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0x0, r1, 0x0) add_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000380)='i', 0x1, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 3.703452921s ago: executing program 4 (id=877): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) keyctl$reject(0x13, 0x0, 0x400, 0x8000000000000204, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) syz_emit_ethernet(0x7a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x9, @private, @local, {[@cipso={0x86, 0x6}, @cipso={0x86, 0x29, 0x0, [{0x0, 0x6, "4b6cefc5"}, {0x0, 0x7, "df61168c24"}, {0x0, 0xa, "2189ea43a2149b84"}, {0x0, 0x7, "f7d11634ee"}, {0x0, 0x5, "02a209"}]}, @timestamp={0x44, 0xc, 0x56, 0x0, 0x0, [0x0, 0x0]}]}}}}}}}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) syz_open_dev$sndctrl(&(0x7f0000000000), 0x6, 0x4000) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 3.667208903s ago: executing program 0 (id=878): socket(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="611234000000000061134c0000000000bf2000000000000015000200000001103d030100000000009500000000000000bc26000000000000bf67000000000000070300000fff070067020000030000001606000000000078bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f909ad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305865050df26469fac5202d6293c3d5e11f4f83e7455baeeba4f"], &(0x7f0000000100)='GPL\x00'}, 0x48) 3.074597676s ago: executing program 2 (id=879): r0 = syz_open_dev$radio(0x0, 0x1, 0x2) write$binfmt_script(r0, 0x0, 0x0) close(0x3) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r1, 0x0, 0x0) getpeername(r1, 0x0, &(0x7f0000000100)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) inotify_init() ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x3) setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, 0x0, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0x4e21, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01fca2712c1c941e1cdafbbb43f09c70", "e13808ca72381f41e5fff9620915b6f78670dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) ioctl$EVIOCGPROP(r4, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r4, 0x4004743a, &(0x7f0000000080)=0x200020) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x1a) 2.415989745s ago: executing program 0 (id=880): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f19}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.348151101s ago: executing program 2 (id=881): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2.227007962s ago: executing program 2 (id=882): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x10000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) chdir(&(0x7f0000000240)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000240), 0x3af4701e) 1.555787271s ago: executing program 3 (id=883): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10c4, 0x8acf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xb, "3ff0591a"}]}}, 0x0}, 0x0) 1.546406562s ago: executing program 1 (id=884): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x5000, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)}, {0x0}], 0x2, 0x0, 0x0, 0x60000000}, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r5 = fsopen(&(0x7f00000001c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = syz_open_pts(r0, 0x101300) ioctl$TIOCSCTTY(r6, 0x540e, 0x3f) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)) open$dir(&(0x7f0000000000)='./file0\x00', 0x4000, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x8000}) 523.487533ms ago: executing program 2 (id=885): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) syz_clone(0x8021000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002380)={0x1f, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x4}) 123.772439ms ago: executing program 2 (id=886): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r0}, &(0x7f0000000400), 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, 0x0, &(0x7f0000000000)=""/1, 0x2}, 0x20) bpf$PROG_LOAD(0x2, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x800840, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x122a, &(0x7f0000001840)="$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") ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000001ac0)={0x0, 'veth0_vlan\x00', {0x3}, 0x4006}) 55.994225ms ago: executing program 0 (id=887): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x0, 'ip6gre0\x00', {0x2}, 0x3ff}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff00000700020000080002000a01010008000100ac14143308000300", @ANYRES32=r0], 0x3c}}, 0xea5bc50b6199573e) accept4(r0, 0x0, 0x0, 0x80400) 0s ago: executing program 2 (id=888): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x5000, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)}, {0x0}], 0x2, 0x0, 0x0, 0x60000000}, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r5 = fsopen(&(0x7f00000001c0)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = syz_open_pts(r0, 0x101300) ioctl$TIOCSCTTY(r6, 0x540e, 0x3f) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)) open$dir(&(0x7f0000000000)='./file0\x00', 0x4000, 0x0) r7 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, &(0x7f0000000080)={0x8, 0x8169, 0x8000}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.152' (ED25519) to the list of known hosts. [ 58.959317][ T4171] cgroup: Unknown subsys name 'net' [ 59.102220][ T4171] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.624248][ T4171] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 62.685642][ T4185] chnl_net:caif_netlink_parms(): no params data found [ 62.701898][ T4195] chnl_net:caif_netlink_parms(): no params data found [ 62.761028][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 62.771314][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 62.814106][ T4197] chnl_net:caif_netlink_parms(): no params data found [ 62.931162][ T4185] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.939135][ T4185] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.947709][ T4185] device bridge_slave_0 entered promiscuous mode [ 62.967893][ T4195] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.975232][ T4195] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.983316][ T4195] device bridge_slave_0 entered promiscuous mode [ 62.995207][ T4195] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.002326][ T4195] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.010538][ T4195] device bridge_slave_1 entered promiscuous mode [ 63.019250][ T4185] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.026728][ T4185] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.034588][ T4185] device bridge_slave_1 entered promiscuous mode [ 63.046427][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.053522][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.061698][ T4192] device bridge_slave_0 entered promiscuous mode [ 63.070566][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.078019][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.086708][ T4192] device bridge_slave_1 entered promiscuous mode [ 63.120319][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.127846][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.136117][ T4184] device bridge_slave_0 entered promiscuous mode [ 63.170204][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.177572][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.185986][ T4184] device bridge_slave_1 entered promiscuous mode [ 63.208220][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.219959][ T4195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.232162][ T4185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.249589][ T4197] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.256971][ T4197] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.265034][ T4197] device bridge_slave_0 entered promiscuous mode [ 63.274696][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.285916][ T4185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.296683][ T4195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.319477][ T4197] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.326796][ T4197] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.335469][ T4197] device bridge_slave_1 entered promiscuous mode [ 63.363554][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.395241][ T4192] team0: Port device team_slave_0 added [ 63.403415][ T4185] team0: Port device team_slave_0 added [ 63.412683][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.424320][ T4195] team0: Port device team_slave_0 added [ 63.432939][ T4195] team0: Port device team_slave_1 added [ 63.447235][ T4185] team0: Port device team_slave_1 added [ 63.456303][ T4197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.467025][ T4192] team0: Port device team_slave_1 added [ 63.474325][ T4197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.537469][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.544466][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.571442][ T4195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.590919][ T4195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.598359][ T4195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.624736][ T4195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.648841][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.656211][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.682844][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.697381][ T4184] team0: Port device team_slave_0 added [ 63.704012][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.711397][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.737792][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.757777][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.765089][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.791285][ T4185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.807837][ T4197] team0: Port device team_slave_0 added [ 63.814195][ T4185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.821288][ T4185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.847830][ T4185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.880765][ T4184] team0: Port device team_slave_1 added [ 63.898690][ T4197] team0: Port device team_slave_1 added [ 63.912615][ T4195] device hsr_slave_0 entered promiscuous mode [ 63.919713][ T4195] device hsr_slave_1 entered promiscuous mode [ 63.941455][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.948624][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.975349][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.994016][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.001630][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.028279][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.093919][ T4185] device hsr_slave_0 entered promiscuous mode [ 64.101534][ T4185] device hsr_slave_1 entered promiscuous mode [ 64.109388][ T4185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.117759][ T4185] Cannot create hsr debugfs directory [ 64.127277][ T4192] device hsr_slave_0 entered promiscuous mode [ 64.135296][ T4192] device hsr_slave_1 entered promiscuous mode [ 64.142143][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.150215][ T4192] Cannot create hsr debugfs directory [ 64.164052][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.171218][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.197858][ T4197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.229680][ T4184] device hsr_slave_0 entered promiscuous mode [ 64.236783][ T4184] device hsr_slave_1 entered promiscuous mode [ 64.243538][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.251598][ T4184] Cannot create hsr debugfs directory [ 64.258993][ T4197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.266520][ T4197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.293117][ T4197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.315868][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 64.315868][ T4186] Bluetooth: hci1: command 0x0409 tx timeout [ 64.395064][ T13] Bluetooth: hci4: command 0x0409 tx timeout [ 64.401294][ T13] Bluetooth: hci2: command 0x0409 tx timeout [ 64.407899][ T13] Bluetooth: hci3: command 0x0409 tx timeout [ 64.451007][ T4197] device hsr_slave_0 entered promiscuous mode [ 64.458036][ T4197] device hsr_slave_1 entered promiscuous mode [ 64.464714][ T4197] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.472528][ T4197] Cannot create hsr debugfs directory [ 64.723527][ T4192] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 64.740065][ T4192] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 64.749338][ T4192] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 64.765989][ T4192] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 64.812045][ T4185] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.821774][ T4185] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.837507][ T4185] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.855375][ T4185] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.907566][ T4195] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.948050][ T4195] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.969356][ T4195] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.980765][ T4195] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.011084][ T4184] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.020407][ T4184] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.033427][ T4184] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.058532][ T4184] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.095946][ T4185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.134234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.144144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.154208][ T4197] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.174515][ T4197] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.189433][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.206311][ T4197] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.218105][ T4185] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.237730][ T4197] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.266696][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.274773][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.285565][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.294738][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.305068][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.312389][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.339107][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.347557][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.377199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.386473][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.396419][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.403547][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.413206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.422396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.431932][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.441880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.451288][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.458810][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.466941][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.479049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.487740][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.494950][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.505810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.546007][ T4195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.560490][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.570250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.579734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.590046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.621577][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.633055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.641779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.653975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.663625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.673241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.682166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.690937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.700848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.709791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.718967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.727913][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.736711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.745361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.753945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.769203][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.786727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.796367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.816459][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.826205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.834726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.843809][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.852182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.866031][ T4195] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.881952][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.895652][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.904397][ T3091] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.911641][ T3091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.923052][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.937867][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.951373][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.963184][ T3091] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.970532][ T3091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.017553][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.028322][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.038857][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.048800][ T3091] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.056104][ T3091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.066489][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.076729][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.086141][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.096126][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.107080][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.116493][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.125343][ T3091] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.132544][ T3091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.142256][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.164137][ T4197] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.180141][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.199122][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.212253][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.264261][ T4197] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.281051][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.291019][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.302414][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.318973][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.333181][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.345325][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.354780][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.365105][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.375817][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.384674][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.394255][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.396571][ T4256] Bluetooth: hci1: command 0x041b tx timeout [ 66.407772][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.417946][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.423989][ T4256] Bluetooth: hci0: command 0x041b tx timeout [ 66.433115][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.461619][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.470916][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.479386][ T4256] Bluetooth: hci3: command 0x041b tx timeout [ 66.480414][ T4256] Bluetooth: hci2: command 0x041b tx timeout [ 66.491886][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.502948][ T4256] Bluetooth: hci4: command 0x041b tx timeout [ 66.503398][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.516793][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.526067][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.534744][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.544045][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.551341][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.562328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.571179][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.580023][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.588090][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.607980][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.626297][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.647232][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.671078][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.699929][ T4185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.743327][ T4192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.751302][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.765205][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.772784][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.783521][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.795163][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.813725][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.822981][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.844384][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.867610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.896853][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.909649][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.940178][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.971295][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.986998][ T4197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.063495][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.078213][ T4185] device veth0_vlan entered promiscuous mode [ 67.095165][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.102739][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.129005][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.137908][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.147963][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.156228][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.196234][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.216452][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.244293][ T4185] device veth1_vlan entered promiscuous mode [ 67.267672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.283501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.298739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.310917][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.342850][ T4184] device veth0_vlan entered promiscuous mode [ 67.358543][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.368021][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.377684][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.387976][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.396904][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.415601][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.423940][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.432138][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.443476][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.469694][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.479823][ T4184] device veth1_vlan entered promiscuous mode [ 67.487791][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.496971][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.506489][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.515735][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.524631][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.542328][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.551006][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.561580][ T4185] device veth0_macvtap entered promiscuous mode [ 67.573483][ T4185] device veth1_macvtap entered promiscuous mode [ 67.597584][ T4192] device veth0_vlan entered promiscuous mode [ 67.612430][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.620867][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.629194][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.639171][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.647999][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.656962][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.665860][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.676344][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.684625][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.701973][ T4195] device veth0_vlan entered promiscuous mode [ 67.714317][ T4192] device veth1_vlan entered promiscuous mode [ 67.747999][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.761542][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.771944][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.803187][ T4184] device veth0_macvtap entered promiscuous mode [ 67.811727][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.820298][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.829979][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.839459][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.857624][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.873602][ T4197] device veth0_vlan entered promiscuous mode [ 67.887098][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.896724][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.906647][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.919504][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.928729][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.937405][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.953557][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.968970][ T4184] device veth1_macvtap entered promiscuous mode [ 67.979278][ T4195] device veth1_vlan entered promiscuous mode [ 67.991313][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.001742][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.011847][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.021100][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.033409][ T4185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.043618][ T4185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.052869][ T4185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.062026][ T4185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.076784][ T4192] device veth0_macvtap entered promiscuous mode [ 68.101128][ T4197] device veth1_vlan entered promiscuous mode [ 68.117506][ T4192] device veth1_macvtap entered promiscuous mode [ 68.154560][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.168683][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.180838][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.192079][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.204147][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.218368][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.230402][ T4184] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.240035][ T4184] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.249633][ T4184] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.258700][ T4184] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.284595][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.295360][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.305796][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.316854][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.329719][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.338032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.347650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.357113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.366521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.374723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.383679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.392957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.402739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.411984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.421227][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.433312][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.443405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.461943][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.473764][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.476965][ T4240] Bluetooth: hci0: command 0x040f tx timeout [ 68.486501][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.502892][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.504226][ T4240] Bluetooth: hci1: command 0x040f tx timeout [ 68.518514][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.532911][ T4195] device veth0_macvtap entered promiscuous mode [ 68.552705][ T4197] device veth0_macvtap entered promiscuous mode [ 68.565988][ T4240] Bluetooth: hci4: command 0x040f tx timeout [ 68.572114][ T4240] Bluetooth: hci2: command 0x040f tx timeout [ 68.578857][ T4240] Bluetooth: hci3: command 0x040f tx timeout [ 68.589869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.598762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.608516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.620179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.629186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.638947][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.650429][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.660722][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.669713][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.678608][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.692861][ T4197] device veth1_macvtap entered promiscuous mode [ 68.709495][ T4195] device veth1_macvtap entered promiscuous mode [ 68.801585][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.814116][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.824419][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.835527][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.846602][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.857943][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.869720][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.897828][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.909219][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.920021][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.930894][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.942533][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.953665][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.966083][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.977703][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.989166][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.997915][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.008199][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 69.016888][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.026237][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.035263][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.044336][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.059841][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.074102][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.086579][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.097192][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.107430][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.119543][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.131188][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.141482][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.150610][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.154420][ T4197] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.169265][ T4197] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.179005][ T4197] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.188500][ T4197] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.210249][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.222265][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.233061][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.243953][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.254717][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.265766][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.277183][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.288184][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.299480][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.315335][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.324255][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.335403][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.343648][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.353802][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.390134][ T4195] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.399568][ T4195] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.409893][ T4195] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.419450][ T4195] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.437706][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.456994][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.479410][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.487917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.500426][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.509671][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.566853][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.586657][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.612908][ T3091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.622053][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.630253][ T3091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.656351][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.675944][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.684882][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.703710][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.814343][ T3091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.846488][ T3091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.897045][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.925722][ T3091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.947839][ T3091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.981002][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.028240][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.062866][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.075157][ T3091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.086376][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.095176][ T3091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.103872][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.248336][ T4303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 70.264502][ T4303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 70.292149][ T4303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 70.312269][ T4303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 70.331562][ T4303] Zero length message leads to an empty skb [ 70.405394][ T4186] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 70.556590][ T4288] Bluetooth: hci1: command 0x0419 tx timeout [ 70.563958][ T4288] Bluetooth: hci0: command 0x0419 tx timeout [ 70.586915][ T146] block nbd0: Receive control failed (result -32) [ 70.596732][ T4307] block nbd0: shutting down sockets [ 70.637093][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 70.650455][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 70.660312][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 70.669483][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 70.678520][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 70.687564][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 70.696946][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 70.706116][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 70.716139][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 70.725262][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 70.945838][ T4288] Bluetooth: hci3: command 0x0419 tx timeout [ 70.948383][ T4186] usb 5-1: Using ep0 maxpacket: 8 [ 71.441230][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.448395][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.135332][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 73.141658][ T4288] Bluetooth: hci4: command 0x0419 tx timeout [ 73.295088][ T4186] usb 5-1: device descriptor read/all, error -71 [ 73.528614][ T4328] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10'. [ 74.880742][ T4342] loop2: detected capacity change from 0 to 1024 [ 75.165717][ T4347] loop0: detected capacity change from 0 to 128 [ 75.176304][ T4327] loop4: detected capacity change from 0 to 32768 [ 75.215655][ T4347] ======================================================= [ 75.215655][ T4347] WARNING: The mand mount option has been deprecated and [ 75.215655][ T4347] and is ignored by this kernel. Remove the mand [ 75.215655][ T4347] option from the mount to silence this warning. [ 75.215655][ T4347] ======================================================= [ 75.250913][ C1] vkms_vblank_simulate: vblank timer overrun [ 75.390729][ T154] hfsplus: bad catalog file entry [ 75.407967][ T154] hfsplus: b-tree write err: -5, ino 3 [ 75.475596][ T4327] syz.4.11 uses obsolete (PF_INET,SOCK_PACKET) [ 75.594287][ T4347] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 75.616283][ T4347] hpfs: filesystem error: improperly stopped [ 75.641094][ T4347] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 75.650329][ T4347] hpfs: You really don't want any checks? You are crazy... [ 75.657948][ T4347] hpfs: Code page index out of array [ 75.663419][ T4347] hpfs: code page support is disabled [ 75.670290][ T4347] hpfs: hpfs_map_4sectors(): unaligned read [ 75.694433][ T4347] hpfs: hpfs_map_4sectors(): unaligned read [ 75.707139][ T4347] hpfs: filesystem error: unable to find root dir [ 77.658465][ T4359] loop0: detected capacity change from 0 to 128 [ 77.693425][ T4359] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 77.754005][ T4359] hpfs: filesystem error: improperly stopped [ 77.760639][ T4359] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 77.778901][ T4359] hpfs: You really don't want any checks? You are crazy... [ 77.798389][ T4344] loop1: detected capacity change from 0 to 32768 [ 77.805497][ T4359] hpfs: hpfs_map_sector(): read error [ 77.835318][ T4359] hpfs: code page support is disabled [ 77.840946][ T4359] hpfs: hpfs_map_4sectors(): unaligned read [ 77.919812][ T4359] hpfs: hpfs_map_4sectors(): unaligned read [ 77.944182][ T4359] hpfs: filesystem error: unable to find root dir [ 78.449306][ T4359] hpfs: hpfs_map_4sectors(): unaligned read [ 78.608842][ T4359] hpfs: hpfs_map_sector(): read error [ 80.752061][ T4384] syz.0.27 (4384) used greatest stack depth: 20912 bytes left [ 83.872822][ T4400] loop1: detected capacity change from 0 to 1024 [ 85.405277][ T4401] loop3: detected capacity change from 0 to 1024 [ 86.069766][ T4401] EXT4-fs (loop3): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,errors=remount-ro,auto_da_alloc,nodioread_nolock,. Quota mode: none. [ 86.088148][ T4401] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.343298][ T4401] EXT4-fs error (device loop3): ext4_map_blocks:739: inode #15: block 3: comm syz.3.32: lblock 3 mapped to illegal pblock 3 (length 3) [ 86.442979][ T3091] hfsplus: b-tree write err: -5, ino 4 [ 86.471242][ T4401] EXT4-fs (loop3): Remounting filesystem read-only [ 86.489788][ T4408] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #15: block 3: comm syz.3.32: lblock 3 mapped to illegal pblock 3 (length 1) [ 86.529986][ T4411] loop2: detected capacity change from 0 to 128 [ 86.588019][ T4408] EXT4-fs (loop3): Remounting filesystem read-only [ 86.606038][ T4408] EXT4-fs error (device loop3): ext4_map_blocks:629: inode #15: block 3: comm syz.3.32: lblock 3 mapped to illegal pblock 3 (length 1) [ 86.622340][ T4411] FAT-fs (loop2): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 86.666004][ T4408] EXT4-fs (loop3): Remounting filesystem read-only [ 86.808077][ T1111] cfg80211: failed to load regulatory.db [ 86.925087][ T4415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'. [ 86.990361][ T4415] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.998918][ T4415] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.581386][ T4413] loop1: detected capacity change from 0 to 131072 [ 89.089774][ T4437] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 89.339663][ T4413] F2FS-fs (loop1): Test dummy encryption mode enabled [ 89.413341][ T4446] loop0: detected capacity change from 0 to 256 [ 89.420487][ T4413] F2FS-fs (loop1): invalid crc value [ 89.452815][ T4413] F2FS-fs (loop1): Found nat_bits in checkpoint [ 89.479408][ T4446] FAT-fs (loop0): Unrecognized mount option "ÇeÐï~æ;ÓC1‰" or missing value [ 89.526990][ T4437] netlink: 6 bytes leftover after parsing attributes in process `syz.4.35'. [ 89.537504][ T4413] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 89.585727][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 89.766675][ T4437] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 90.551708][ T4437] syz.4.35 (4437) used greatest stack depth: 20368 bytes left [ 90.560110][ T4451] netlink: 'syz.3.44': attribute type 10 has an invalid length. [ 90.662022][ T4451] team0: Port device netdevsim0 added [ 90.804242][ T4457] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 90.811238][ T4457] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 90.846249][ T4457] vhci_hcd vhci_hcd.0: Device attached [ 91.579453][ T4323] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 91.587729][ T13] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 93.575229][ T13] usb 5-1: config 0 has no interfaces? [ 93.581332][ T13] usb 5-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 93.622683][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.666449][ T13] usb 5-1: config 0 descriptor?? [ 93.773836][ T4458] vhci_hcd: connection reset by peer [ 93.789246][ T13] usb 5-1: can't set config #0, error -71 [ 93.805637][ T4375] vhci_hcd: stop threads [ 93.810857][ T4375] vhci_hcd: release socket [ 93.833119][ T13] usb 5-1: USB disconnect, device number 4 [ 93.852129][ T4375] vhci_hcd: disconnect device [ 95.294781][ T4486] loop4: detected capacity change from 0 to 1024 [ 95.521351][ T4483] device wireguard0 entered promiscuous mode [ 96.243445][ T144] hfsplus: b-tree write err: -5, ino 4 [ 96.731474][ T4323] vhci_hcd: vhci_device speed not set [ 98.696467][ T4508] loop1: detected capacity change from 0 to 256 [ 99.087687][ T4513] netlink: 52 bytes leftover after parsing attributes in process `syz.4.56'. [ 99.182329][ T4508] FAT-fs (loop1): Directory bread(block 64) failed [ 99.193054][ T4517] netlink: 4 bytes leftover after parsing attributes in process `syz.4.56'. [ 99.208491][ T4508] FAT-fs (loop1): Directory bread(block 65) failed [ 99.220214][ T4508] FAT-fs (loop1): Directory bread(block 66) failed [ 99.245102][ T4508] FAT-fs (loop1): Directory bread(block 67) failed [ 99.252196][ T4508] FAT-fs (loop1): Directory bread(block 68) failed [ 99.284978][ T4508] FAT-fs (loop1): Directory bread(block 69) failed [ 99.298308][ T4508] FAT-fs (loop1): Directory bread(block 70) failed [ 99.307189][ T4508] FAT-fs (loop1): Directory bread(block 71) failed [ 99.313935][ T4508] FAT-fs (loop1): Directory bread(block 72) failed [ 99.321215][ T4508] FAT-fs (loop1): Directory bread(block 73) failed [ 100.512671][ T4523] loop3: detected capacity change from 0 to 164 [ 100.617645][ T4525] netlink: 'syz.0.65': attribute type 49 has an invalid length. [ 100.805514][ T4527] loop1: detected capacity change from 0 to 1024 [ 100.842787][ T4527] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 100.876899][ T4527] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,bsddf,barrier=0x0000000000000009,commit=0x0000000000000005,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,noblock_validity,nomblk_io_submit,,errors=continue. Quota mode: none. [ 100.876920][ T4525] netlink: 'syz.0.65': attribute type 49 has an invalid length. [ 100.901813][ C1] vkms_vblank_simulate: vblank timer overrun [ 100.950067][ T4529] netlink: 'syz.3.68': attribute type 4 has an invalid length. [ 101.016592][ T4529] netlink: 152 bytes leftover after parsing attributes in process `syz.3.68'. [ 101.206433][ T4529] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 102.281948][ T4549] loop4: detected capacity change from 0 to 2048 [ 103.048079][ T4548] loop0: detected capacity change from 0 to 40427 [ 103.098611][ T4549] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,noload,acl,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 103.139236][ T4548] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 103.147181][ T4548] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 103.171352][ T4548] F2FS-fs (loop0): invalid crc value [ 103.663314][ T4532] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 104.105452][ T4545] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 104.118388][ T4545] EXT4-fs (loop4): This should not happen!! Data will be lost [ 104.118388][ T4545] [ 104.128130][ T4545] EXT4-fs (loop4): Total free blocks count 0 [ 104.134131][ T4545] EXT4-fs (loop4): Free/Dirty block details [ 104.140092][ T4545] EXT4-fs (loop4): free_blocks=2415919504 [ 104.145896][ T4545] EXT4-fs (loop4): dirty_blocks=24576 [ 104.151285][ T4545] EXT4-fs (loop4): Block reservation details [ 104.157583][ T4545] EXT4-fs (loop4): i_reserved_data_blocks=1536 [ 104.200479][ T4554] loop3: detected capacity change from 0 to 164 [ 104.246611][ T4546] process 'syz.2.50' launched './file0' with NULL argv: empty string added [ 104.612093][ T4548] F2FS-fs (loop0): Found nat_bits in checkpoint [ 104.762939][ T3091] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28 [ 104.785110][ T3091] EXT4-fs (loop4): This should not happen!! Data will be lost [ 104.785110][ T3091] [ 104.897847][ T4554] Unsupported NM flag settings (240) [ 104.935233][ T4548] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 104.942378][ T4548] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 105.934334][ T4572] loop1: detected capacity change from 0 to 16 [ 106.131310][ T4572] erofs: (device loop1): mounted with root inode @ nid 36. [ 106.239510][ T4572] attempt to access beyond end of device [ 106.239510][ T4572] loop1: rw=524288, want=32, limit=16 [ 106.345544][ T4572] erofs: (device loop1): z_erofs_readahead: readahead error at page 7 @ nid 89 [ 106.394967][ T4572] erofs: (device loop1): z_erofs_readahead: readahead error at page 5 @ nid 89 [ 106.405698][ T4572] erofs: (device loop1): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 106.416090][ T4572] attempt to access beyond end of device [ 106.416090][ T4572] loop1: rw=524288, want=56, limit=16 [ 106.432315][ T4572] erofs: (device loop1): z_erofs_lz4_decompress: failed to decompress -26 in[46, 4050] out[8192] [ 106.474744][ T26] audit: type=1800 audit(1771503554.542:2): pid=4572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.75" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 106.644925][ T4572] syz.1.75 (4572) used greatest stack depth: 19280 bytes left [ 106.678676][ T4579] loop2: detected capacity change from 0 to 1024 [ 107.947094][ T4489] hfsplus: b-tree write err: -5, ino 4 [ 107.991148][ T4591] loop3: detected capacity change from 0 to 256 [ 108.945099][ T4224] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.388436][ T4224] usb 3-1: Using ep0 maxpacket: 8 [ 109.705710][ T4224] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 109.853489][ T4224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.010878][ T4224] usb 3-1: Product: syz [ 110.088512][ T4224] usb 3-1: Manufacturer: syz [ 110.179359][ T4224] usb 3-1: SerialNumber: syz [ 110.335717][ T4224] usb 3-1: config 0 descriptor?? [ 110.505480][ T26] audit: type=1804 audit(1771503558.582:3): pid=4612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.88" name="/newroot/22/file1" dev="fuse" ino=1 res=1 errno=0 [ 110.547524][ T26] audit: type=1804 audit(1771503558.602:4): pid=4612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.88" name="/newroot/22/file1" dev="fuse" ino=1 res=1 errno=0 [ 110.574953][ T1111] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 110.627664][ T4615] netlink: 'syz.3.89': attribute type 28 has an invalid length. [ 110.695052][ T4606] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 110.888317][ T4224] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 110.988626][ T4619] loop3: detected capacity change from 0 to 64 [ 111.112383][ T4619] gfs2: path_lookup on c::;øN€…L‰´¶;o$: returned error -2 [ 111.165261][ T4224] gspca_sunplus: reg_w_riv err -71 [ 111.214116][ T4224] sunplus: probe of 3-1:0.0 failed with error -71 [ 111.225354][ T4606] usb 5-1: unable to get BOS descriptor or descriptor too short [ 111.387048][ T4606] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.504013][ T4224] usb 3-1: USB disconnect, device number 2 [ 111.549863][ T4606] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 111.634893][ T1111] usb 2-1: Using ep0 maxpacket: 32 [ 111.645112][ T4606] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 111.860841][ T4606] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 111.882875][ T4606] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.005092][ T1111] usb 2-1: unable to read config index 0 descriptor/all [ 113.015003][ T1111] usb 2-1: can't read configurations, error -71 [ 113.287799][ T4623] loop0: detected capacity change from 0 to 131072 [ 113.298628][ T4606] usb 5-1: Product: syz [ 113.303115][ T4606] usb 5-1: Manufacturer: syz [ 113.307873][ T4606] usb 5-1: SerialNumber: syz [ 113.331055][ T4623] F2FS-fs (loop0): Test dummy encryption mode enabled [ 113.339048][ T4606] usb 5-1: can't set config #1, error -71 [ 113.347588][ T4623] F2FS-fs (loop0): invalid crc value [ 113.359188][ T4606] usb 5-1: USB disconnect, device number 5 [ 113.366667][ T4632] loop1: detected capacity change from 0 to 4096 [ 113.381826][ T4623] F2FS-fs (loop0): Found nat_bits in checkpoint [ 113.453039][ T4623] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 113.486062][ T4632] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 113.570053][ T4636] loop3: detected capacity change from 0 to 8192 [ 113.682203][ T26] audit: type=1800 audit(1771503561.762:5): pid=4636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.97" name="file2" dev="loop3" ino=1048592 res=0 errno=0 [ 113.997495][ T26] audit: type=1804 audit(1771503562.082:6): pid=4653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.99" name="/newroot/18/file1" dev="fuse" ino=1 res=1 errno=0 [ 114.487826][ T26] audit: type=1800 audit(1771503562.572:7): pid=4632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.95" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 114.625359][ T26] audit: type=1804 audit(1771503562.712:8): pid=4653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.99" name="/newroot/18/file1" dev="fuse" ino=1 res=1 errno=0 [ 114.851568][ T4660] loop3: detected capacity change from 0 to 32768 [ 115.600673][ T4670] loop2: detected capacity change from 0 to 2048 [ 115.659984][ T4672] loop0: detected capacity change from 0 to 512 [ 115.826130][ T4670] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.862177][ T4672] EXT4-fs error (device loop0): ext4_expand_extra_isize_ea:2757: inode #11: comm syz.0.105: corrupted xattr block 95 [ 116.286431][ T4672] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2807: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 116.540186][ T4672] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.105: bg 0: block 7: invalid block bitmap [ 116.806247][ T4672] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 116.865795][ T4672] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2923: inode #11: comm syz.0.105: corrupted xattr block 95 [ 117.620125][ T4692] gfs2: gfs2 mount does not exist [ 118.177275][ T4672] EXT4-fs warning (device loop0): ext4_evict_inode:302: xattr delete (err -117) [ 118.473107][ T4672] EXT4-fs (loop0): 1 orphan inode deleted [ 118.485840][ T4672] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 119.411426][ T26] audit: type=1804 audit(1771503567.492:9): pid=4704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.113" name="/newroot/30/file1" dev="fuse" ino=1 res=1 errno=0 [ 119.545397][ T26] audit: type=1804 audit(1771503567.492:10): pid=4704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.113" name="/newroot/30/file1" dev="fuse" ino=1 res=1 errno=0 [ 119.693234][ T4708] loop4: detected capacity change from 0 to 4096 [ 119.855550][ T4708] NILFS error (device loop4): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 119.872180][ T4711] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 119.924402][ T4708] NILFS (loop4): mounting fs with errors [ 120.923634][ T4695] loop2: detected capacity change from 0 to 32768 [ 121.018147][ T4702] loop1: detected capacity change from 0 to 32768 [ 121.193262][ T4702] find_entry called with index >= next_index [ 121.222158][ T4702] find_entry called with index >= next_index [ 121.250662][ T4702] find_entry called with index >= next_index [ 121.284084][ T4695] JBD2: Ignoring recovery information on journal [ 121.288200][ T4702] find_entry called with index >= next_index [ 121.297119][ T4606] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 121.305661][ T4702] find_entry called with index >= next_index [ 121.311723][ T4702] add_index: next_index = 0. Resetting! [ 121.324941][ T4702] find_entry called with index >= next_index [ 121.335294][ T4702] find_entry called with index >= next_index [ 121.343606][ T4702] find_entry called with index >= next_index [ 121.358265][ T4727] non-latin1 character 0x3ff found in JFS file name [ 121.366990][ T4727] mount with iocharset=utf8 to access [ 121.368596][ T26] audit: type=1800 audit(1771503569.452:11): pid=4702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.112" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=7 res=0 errno=0 [ 121.506205][ T4695] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 121.585671][ T4606] usb 4-1: Using ep0 maxpacket: 16 [ 121.636676][ T4197] ocfs2: Unmounting device (7,2) on (node local) [ 121.715282][ T4606] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.728207][ T4606] usb 4-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 121.761076][ T4606] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.795572][ T4606] usb 4-1: config 0 descriptor?? [ 122.174354][ T4738] loop2: detected capacity change from 0 to 32768 [ 122.196330][ T4738] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.125 (4738) [ 122.222401][ T26] audit: type=1804 audit(1771503570.302:12): pid=4736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.124" name="/newroot/27/file1" dev="fuse" ino=1 res=1 errno=0 [ 122.272747][ T4735] loop4: detected capacity change from 0 to 4096 [ 122.279585][ T4738] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 122.288857][ T4738] BTRFS info (device loop2): using free space tree [ 122.295482][ T4738] BTRFS info (device loop2): has skinny extents [ 122.333128][ T26] audit: type=1804 audit(1771503570.352:13): pid=4736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.124" name="/newroot/27/file1" dev="fuse" ino=1 res=1 errno=0 [ 122.406630][ T4735] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 122.482479][ T4606] input: HID 041e:3100 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:041E:3100.0001/input/input5 [ 123.556234][ T4738] BTRFS info (device loop2): enabling ssd optimizations [ 123.695149][ T4606] creative-sb0540 0003:041E:3100.0001: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.3-1/input0 [ 123.737892][ T4606] usb 4-1: USB disconnect, device number 2 [ 124.312989][ T4192] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 126.337786][ T4771] fido_id[4771]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 128.915669][ T4801] loop3: detected capacity change from 0 to 65 [ 129.055950][ T4801] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway [ 129.251871][ T4806] loop0: detected capacity change from 0 to 256 [ 129.333854][ T4806] exfat: Unknown parameter 'zero_size_dir' [ 129.589208][ T4811] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 130.751946][ T4816] loop3: detected capacity change from 0 to 4096 [ 130.881800][ T4816] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 131.705651][ T4826] loop0: detected capacity change from 0 to 4096 [ 131.861246][ T4826] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 131.963033][ T26] audit: type=1800 audit(1771503580.042:14): pid=4826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.144" name="bus" dev="loop0" ino=33 res=0 errno=0 [ 132.117161][ T155] ntfs3: loop3: ntfs3_write_inode r=1e failed, -22. [ 132.123992][ T155] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 132.330610][ T4184] ntfs3: loop3: ntfs_evict_inode r=1e failed, -22. [ 132.842689][ T4849] ODEBUG: Out of memory. ODEBUG disabled [ 132.923790][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.930185][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.161512][ T4224] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 134.077220][ T4855] loop1: detected capacity change from 0 to 131072 [ 134.609101][ T4855] F2FS-fs (loop1): Test dummy encryption mode enabled [ 134.618380][ T4855] F2FS-fs (loop1): invalid crc value [ 134.855192][ T4224] usb 1-1: Using ep0 maxpacket: 32 [ 134.931670][ T4855] F2FS-fs (loop1): Found nat_bits in checkpoint [ 135.026013][ T4224] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 135.039948][ T4855] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 135.174054][ T4224] usb 1-1: config 0 has no interface number 0 [ 135.334954][ T4224] usb 1-1: config 0 interface 12 has no altsetting 0 [ 135.454938][ T4224] usb 1-1: string descriptor 0 read error: -71 [ 135.462771][ T4224] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 135.514019][ T4224] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.548676][ T4855] fscrypt (loop1, inode 10): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 135.582539][ T4879] fscrypt (loop1, inode 11): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 135.626940][ T4224] usb 1-1: config 0 descriptor?? [ 135.647024][ T4224] usb 1-1: can't set config #0, error -71 [ 135.706596][ T4224] usb 1-1: USB disconnect, device number 2 [ 136.312234][ T4867] loop4: detected capacity change from 0 to 32768 [ 136.424749][ T4867] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.159 (4867) [ 136.489556][ T4867] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 136.654879][ T4906] loop1: detected capacity change from 0 to 256 [ 136.872479][ T4867] BTRFS info (device loop4): using free space tree [ 137.063832][ T4907] loop3: detected capacity change from 0 to 1024 [ 137.080510][ T4867] BTRFS info (device loop4): has skinny extents [ 137.373822][ T4885] loop2: detected capacity change from 0 to 32768 [ 137.523097][ T4885] JBD2: Ignoring recovery information on journal [ 137.741391][ T4921] loop1: detected capacity change from 0 to 512 [ 137.748882][ T4885] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 137.905758][ T4366] hfsplus: b-tree write err: -5, ino 4 [ 137.931204][ T4921] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 137.977894][ T4867] BTRFS error (device loop4): open_ctree failed: -12 [ 137.978574][ T4921] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 138.135674][ T4921] EXT4-fs (loop1): 1 truncate cleaned up [ 138.141653][ T4921] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 138.166876][ T4921] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.1.168: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 138.200951][ T4921] EXT4-fs (loop1): Remounting filesystem read-only [ 138.245035][ T4921] EXT4-fs error (device loop1) in ext4_delete_entry:2800: Corrupt filesystem [ 138.280532][ T4197] ocfs2: Unmounting device (7,2) on (node local) [ 138.291515][ T4921] EXT4-fs (loop1): Remounting filesystem read-only [ 138.565202][ T4921] EXT4-fs warning (device loop1): ext4_rename_delete:3792: inode #2: comm syz.1.168: Deleting old file: nlink 4, error=-117 [ 142.045287][ T4975] overlayfs: missing 'lowerdir' [ 143.411982][ T4982] loop4: detected capacity change from 0 to 262144 [ 143.483359][ T4986] loop3: detected capacity change from 0 to 4096 [ 143.658238][ T4993] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 144.654764][ T4986] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 144.665390][ T4994] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.690130][ T4982] F2FS-fs (loop4): Found nat_bits in checkpoint [ 144.707900][ T4986] NILFS (loop3): mounting fs with errors [ 144.744980][ T4982] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 145.284406][ T5011] loop3: detected capacity change from 0 to 256 [ 146.797768][ T5026] netlink: 16 bytes leftover after parsing attributes in process `syz.1.197'. [ 147.613938][ T5030] netlink: 16 bytes leftover after parsing attributes in process `syz.0.200'. [ 147.888633][ T5018] loop3: detected capacity change from 0 to 32768 [ 150.427656][ T5052] netlink: 20 bytes leftover after parsing attributes in process `syz.3.209'. [ 150.846691][ T5061] netlink: 16 bytes leftover after parsing attributes in process `syz.2.210'. [ 152.544165][ T5077] loop2: detected capacity change from 0 to 764 [ 152.570184][ T5073] loop3: detected capacity change from 0 to 32768 [ 152.636443][ T5077] tmpfs: Unknown parameter 'quota' [ 152.767859][ T5080] loop0: detected capacity change from 0 to 128 [ 152.798477][ T5073] XFS (loop3): Mounting V5 Filesystem [ 152.863610][ T5089] loop4: detected capacity change from 0 to 16 [ 152.893669][ T5073] XFS (loop3): Ending clean mount [ 152.926580][ T5073] XFS (loop3): Quotacheck needed: Please wait. [ 152.937113][ T5089] erofs: (device loop4): z_erofs_load_lz4_config: too large lz4 pclusterblks 16832 [ 152.959898][ T5092] netlink: 24 bytes leftover after parsing attributes in process `syz.2.217'. [ 153.001671][ T5080] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 153.027717][ T5073] XFS (loop3): Quotacheck: Done. [ 153.032280][ T5080] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 153.401900][ T5098] XFS (loop3): User initiated shutdown received. [ 153.409233][ T5098] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 153.422719][ T5098] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 153.799279][ T4184] XFS (loop3): Unmounting Filesystem [ 154.090686][ T5106] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 154.128027][ C0] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 155.119518][ T5116] loop0: detected capacity change from 0 to 4096 [ 155.491836][ T5099] loop4: detected capacity change from 0 to 40427 [ 157.024854][ T5141] tmpfs: Unknown parameter 'grpquota' [ 159.326649][ T5150] loop3: detected capacity change from 0 to 2048 [ 159.405835][ T5150] UDF-fs: bad mount option "uid=00000000004294967295" or missing value [ 161.306275][ T5173] loop1: detected capacity change from 0 to 2048 [ 162.728816][ T5173] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.409523][ T5194] loop4: detected capacity change from 0 to 4096 [ 165.789415][ T5194] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 165.804132][ T5194] ntfs3: loop4: Failed to load $MFT. [ 165.986868][ T5200] loop2: detected capacity change from 0 to 64 [ 166.791518][ T5208] netlink: 12 bytes leftover after parsing attributes in process `syz.3.255'. [ 170.608013][ T5236] loop3: detected capacity change from 0 to 256 [ 170.697531][ T5236] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d) [ 170.855522][ T5240] loop2: detected capacity change from 0 to 4096 [ 173.078511][ T5258] nftables ruleset with unbound set [ 174.761314][ T5288] loop1: detected capacity change from 0 to 128 [ 174.809113][ T5288] FAT-fs (loop1): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 175.011363][ T5282] loop3: detected capacity change from 0 to 32768 [ 175.567837][ T4814] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 176.525019][ T4814] usb 3-1: Using ep0 maxpacket: 32 [ 176.705411][ T4814] usb 3-1: config 0 interface 0 has no altsetting 0 [ 177.127158][ T5309] loop3: detected capacity change from 0 to 164 [ 178.041240][ T4814] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 178.056037][ T4814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.232020][ T4814] usb 3-1: Product: syz [ 178.236884][ T4814] usb 3-1: Manufacturer: syz [ 178.241539][ T4814] usb 3-1: SerialNumber: syz [ 178.272327][ T4814] usb 3-1: config 0 descriptor?? [ 179.252917][ T4814] usb 3-1: USB disconnect, device number 3 [ 179.312406][ T5326] bond0: option miimon: invalid value (18446744073709488821) [ 179.425190][ T5326] bond0: option miimon: allowed values 0 - 2147483647 [ 179.521990][ T5323] loop4: detected capacity change from 0 to 4096 [ 179.814628][ T5323] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 180.671380][ T5323] ntfs3: loop4: ntfs3_write_inode r=1e failed, -22. [ 180.678808][ T5323] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 181.270050][ T4192] ntfs3: loop4: ntfs_evict_inode r=1e failed, -22. [ 183.209555][ T5348] loop1: detected capacity change from 0 to 4096 [ 183.616170][ T5348] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 183.648655][ T5348] ntfs3: loop1: Failed to load $MFT. [ 184.050491][ T5363] loop4: detected capacity change from 0 to 164 [ 185.570752][ T5365] sched: RT throttling activated [ 186.227692][ T4933] Bluetooth: hci0: command 0x0406 tx timeout [ 186.246810][ T4933] Bluetooth: hci1: command 0x0406 tx timeout [ 186.309282][ T4933] Bluetooth: hci3: command 0x0406 tx timeout [ 186.324998][ T4933] Bluetooth: hci2: command 0x0406 tx timeout [ 186.335199][ T4933] Bluetooth: hci4: command 0x0406 tx timeout [ 189.968465][ T5382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.315'. [ 191.496664][ T5386] netlink: 16 bytes leftover after parsing attributes in process `syz.2.315'. [ 191.714743][ T5397] loop1: detected capacity change from 0 to 1024 [ 191.789594][ T5397] EXT4-fs (loop1): Test dummy encryption mode enabled [ 191.827831][ T5397] EXT4-fs (loop1): inline encryption not supported [ 191.995984][ T5397] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,i_version,noblock_validity,commit=0x0000000000000005,inlinecrypt,max_batch_time=0x0000000000000000,abort,auto_da_alloc,lazytime,noauto_da_alloc,block_validity,,errors=continue. Quota mode: writeback. [ 192.912147][ T5397] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 192.935914][ T5417] loop2: detected capacity change from 0 to 2048 [ 193.019707][ T26] audit: type=1804 audit(1771503641.102:15): pid=5422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.324" name="/newroot/76/file1" dev="fuse" ino=1 res=1 errno=0 [ 193.131708][ T5417] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 193.182425][ T26] audit: type=1800 audit(1771503641.262:16): pid=5417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.325" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 193.206256][ T5430] loop1: detected capacity change from 0 to 256 [ 193.265762][ T5417] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 193.361597][ T5430] FAT-fs (loop1): Directory bread(block 64) failed [ 193.372964][ T5430] FAT-fs (loop1): Directory bread(block 65) failed [ 193.435600][ T5430] FAT-fs (loop1): Directory bread(block 66) failed [ 193.463638][ T5430] FAT-fs (loop1): Directory bread(block 67) failed [ 193.493113][ T5430] FAT-fs (loop1): Directory bread(block 68) failed [ 193.514033][ T5430] FAT-fs (loop1): Directory bread(block 69) failed [ 193.556636][ T5430] FAT-fs (loop1): Directory bread(block 70) failed [ 193.581029][ T5430] FAT-fs (loop1): Directory bread(block 71) failed [ 193.667362][ T5430] FAT-fs (loop1): Directory bread(block 72) failed [ 193.718902][ T5430] FAT-fs (loop1): Directory bread(block 73) failed [ 194.322584][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.329542][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.546346][ T4595] attempt to access beyond end of device [ 194.546346][ T4595] loop1: rw=1, want=1232, limit=256 [ 199.787247][ T5467] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 199.975889][ T5468] loop1: detected capacity change from 0 to 4096 [ 200.030087][ T5468] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 200.626224][ T5468] ntfs3: loop1: Failed to load $MFT. [ 201.405579][ T5481] loop3: detected capacity change from 0 to 128 [ 201.451533][ T5481] FAT-fs (loop3): Directory bread(block 414) failed [ 201.490082][ T5481] FAT-fs (loop3): Directory bread(block 415) failed [ 201.524925][ T5481] FAT-fs (loop3): Directory bread(block 416) failed [ 201.541975][ T5481] FAT-fs (loop3): Directory bread(block 417) failed [ 201.560876][ T5481] FAT-fs (loop3): Directory bread(block 418) failed [ 202.112123][ T5481] FAT-fs (loop3): Directory bread(block 419) failed [ 202.119646][ T5481] FAT-fs (loop3): Directory bread(block 420) failed [ 202.127041][ T5481] FAT-fs (loop3): Directory bread(block 421) failed [ 207.646176][ T5524] loop2: detected capacity change from 0 to 4096 [ 207.759892][ T5524] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 208.747735][ T5524] ntfs3: loop2: Failed to load $MFT. [ 209.405487][ T5552] netlink: 'syz.3.368': attribute type 1 has an invalid length. [ 209.453437][ T5555] loop2: detected capacity change from 0 to 256 [ 209.493927][ T5552] 8021q: adding VLAN 0 to HW filter on device bond1 [ 209.594150][ T5555] FAT-fs (loop2): Directory bread(block 64) failed [ 209.619978][ T5555] FAT-fs (loop2): Directory bread(block 65) failed [ 209.645491][ T5555] FAT-fs (loop2): Directory bread(block 66) failed [ 209.662487][ T5555] FAT-fs (loop2): Directory bread(block 67) failed [ 209.677610][ T5555] FAT-fs (loop2): Directory bread(block 68) failed [ 209.694480][ T5555] FAT-fs (loop2): Directory bread(block 69) failed [ 209.707593][ T5556] bond1: (slave vlan2): making interface the new active one [ 209.733888][ T5555] FAT-fs (loop2): Directory bread(block 70) failed [ 209.750492][ T5556] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 209.785598][ T5555] FAT-fs (loop2): Directory bread(block 71) failed [ 209.793682][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 209.808223][ T5555] FAT-fs (loop2): Directory bread(block 72) failed [ 209.867077][ T5555] FAT-fs (loop2): Directory bread(block 73) failed [ 210.309589][ T5564] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 210.454280][ T5562] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 210.554498][ T5561] delete_channel: no stack [ 211.366161][ T5572] sock: sock_timestamping_bind_phc: sock not bind to device [ 211.551759][ T5574] loop2: detected capacity change from 0 to 32768 [ 212.795359][ T5574] XFS (loop2): Mounting V5 Filesystem [ 213.045797][ T5574] XFS (loop2): Ending clean mount [ 213.092427][ T5574] XFS (loop2): Quotacheck needed: Please wait. [ 213.318398][ T5574] XFS (loop2): Quotacheck: Done. [ 213.584163][ T5605] XFS (loop2): User initiated shutdown received. [ 213.590842][ T5605] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 213.604619][ T5605] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 214.060047][ T5607] loop1: detected capacity change from 0 to 1024 [ 214.067354][ T4197] XFS (loop2): Unmounting Filesystem [ 214.543205][ T5070] hfsplus: b-tree write err: -5, ino 4 [ 215.372001][ T5619] loop4: detected capacity change from 0 to 131072 [ 215.458199][ T5619] F2FS-fs (loop4): invalid crc value [ 215.588778][ T5619] F2FS-fs (loop4): Found nat_bits in checkpoint [ 215.621733][ T5619] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2 [ 215.765622][ T5619] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 216.872448][ T5638] loop1: detected capacity change from 0 to 256 [ 219.493001][ T5651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.612021][ T5658] loop1: detected capacity change from 0 to 256 [ 219.792610][ T5658] FAT-fs (loop1): Directory bread(block 64) failed [ 219.835005][ T5658] FAT-fs (loop1): Directory bread(block 65) failed [ 219.841683][ T5658] FAT-fs (loop1): Directory bread(block 66) failed [ 219.920848][ T5658] FAT-fs (loop1): Directory bread(block 67) failed [ 219.928278][ T5658] FAT-fs (loop1): Directory bread(block 68) failed [ 219.935356][ T5658] FAT-fs (loop1): Directory bread(block 69) failed [ 219.941378][ T5656] loop4: detected capacity change from 0 to 164 [ 219.942321][ T5658] FAT-fs (loop1): Directory bread(block 70) failed [ 219.955924][ T5658] FAT-fs (loop1): Directory bread(block 71) failed [ 219.962756][ T5658] FAT-fs (loop1): Directory bread(block 72) failed [ 220.034931][ T5658] FAT-fs (loop1): Directory bread(block 73) failed [ 222.498295][ T5674] loop3: detected capacity change from 0 to 256 [ 229.044093][ T5703] loop1: detected capacity change from 0 to 164 [ 229.117387][ T5701] loop2: detected capacity change from 0 to 40427 [ 229.186588][ T5701] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 229.194482][ T5701] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 229.214009][ T5701] F2FS-fs (loop2): invalid crc value [ 229.325694][ T5701] F2FS-fs (loop2): Found nat_bits in checkpoint [ 229.425761][ T5701] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 229.432968][ T5701] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 232.014256][ T4933] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 232.405470][ T4933] usb 5-1: Using ep0 maxpacket: 32 [ 232.495029][ T4933] usb 5-1: device descriptor read/all, error -71 [ 232.879957][ T5737] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 233.278324][ T5743] loop1: detected capacity change from 0 to 256 [ 233.462427][ T5743] FAT-fs (loop1): Directory bread(block 64) failed [ 233.474901][ T5743] FAT-fs (loop1): Directory bread(block 65) failed [ 233.481577][ T5743] FAT-fs (loop1): Directory bread(block 66) failed [ 233.534861][ T5743] FAT-fs (loop1): Directory bread(block 67) failed [ 233.541538][ T5743] FAT-fs (loop1): Directory bread(block 68) failed [ 233.633424][ T5750] loop4: detected capacity change from 0 to 1764 [ 233.717477][ T5743] FAT-fs (loop1): Directory bread(block 69) failed [ 233.724291][ T5743] FAT-fs (loop1): Directory bread(block 70) failed [ 233.805153][ T5752] loop2: detected capacity change from 0 to 32768 [ 233.812614][ T5743] FAT-fs (loop1): Directory bread(block 71) failed [ 235.290667][ T5743] FAT-fs (loop1): Directory bread(block 72) failed [ 235.364944][ T5743] FAT-fs (loop1): Directory bread(block 73) failed [ 235.477384][ T5752] XFS (loop2): Mounting V5 Filesystem [ 235.861439][ T5752] XFS (loop2): Ending clean mount [ 235.873181][ T5752] XFS (loop2): Quotacheck needed: Please wait. [ 235.968143][ T5752] XFS (loop2): Quotacheck: Done. [ 236.213140][ T5777] XFS (loop2): User initiated shutdown received. [ 236.219823][ T5777] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 236.233322][ T5777] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 236.664698][ T4197] XFS (loop2): Unmounting Filesystem [ 236.870182][ T5779] loop1: detected capacity change from 0 to 40427 [ 236.942094][ T5779] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 236.949947][ T5779] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 236.964901][ T5779] F2FS-fs (loop1): invalid crc value [ 237.045651][ T5779] F2FS-fs (loop1): Found nat_bits in checkpoint [ 237.084629][ T5779] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 237.092272][ T5779] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 239.352128][ T5792] block device autoloading is deprecated and will be removed. [ 241.212323][ T5818] loop1: detected capacity change from 0 to 32768 [ 241.519115][ T5821] loop2: detected capacity change from 0 to 40427 [ 241.697800][ T5818] XFS (loop1): Mounting V5 Filesystem [ 241.769285][ T5821] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 241.777301][ T5821] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 241.789454][ T5821] F2FS-fs (loop2): invalid crc value [ 241.823327][ T5821] F2FS-fs (loop2): Found nat_bits in checkpoint [ 241.933995][ T5821] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 241.942955][ T5821] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 241.976021][ T5818] XFS (loop1): Ending clean mount [ 242.003519][ T5818] XFS (loop1): Quotacheck needed: Please wait. [ 243.272589][ T5818] XFS (loop1): Quotacheck: Done. [ 243.526049][ T5843] XFS (loop1): User initiated shutdown received. [ 243.532651][ T5843] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 243.546191][ T5843] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 243.945521][ T4185] XFS (loop1): Unmounting Filesystem [ 244.165517][ T5845] xt_recent: Unsupported userspace flags (000000de) [ 245.415835][ T5854] loop2: detected capacity change from 0 to 1764 [ 248.140380][ T5882] loop3: detected capacity change from 0 to 40427 [ 248.233444][ T5882] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 248.241323][ T5882] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 248.251507][ T5882] F2FS-fs (loop3): invalid crc value [ 248.313256][ T5882] F2FS-fs (loop3): Found nat_bits in checkpoint [ 248.418578][ T5882] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 248.425933][ T5882] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 249.972869][ T5895] loop2: detected capacity change from 0 to 32768 [ 250.789891][ T5895] XFS (loop2): Mounting V5 Filesystem [ 250.891752][ T5895] XFS (loop2): Ending clean mount [ 250.899255][ T5895] XFS (loop2): Quotacheck needed: Please wait. [ 250.947096][ T5895] XFS (loop2): Quotacheck: Done. [ 251.183994][ T5906] XFS (loop2): User initiated shutdown received. [ 251.190649][ T5906] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 251.204140][ T5906] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 251.611086][ T4197] XFS (loop2): Unmounting Filesystem [ 255.454831][ T5940] loop3: detected capacity change from 0 to 256 [ 255.566642][ T5940] FAT-fs (loop3): Directory bread(block 64) failed [ 255.595024][ T5946] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 255.613148][ T5948] loop1: detected capacity change from 0 to 256 [ 255.622479][ T5940] FAT-fs (loop3): Directory bread(block 65) failed [ 255.695045][ T5940] FAT-fs (loop3): Directory bread(block 66) failed [ 255.702139][ T5940] FAT-fs (loop3): Directory bread(block 67) failed [ 255.767699][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.774128][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.933184][ T5940] FAT-fs (loop3): Directory bread(block 68) failed [ 255.940150][ T5940] FAT-fs (loop3): Directory bread(block 69) failed [ 255.947608][ T5940] FAT-fs (loop3): Directory bread(block 70) failed [ 255.954317][ T5940] FAT-fs (loop3): Directory bread(block 71) failed [ 255.964984][ T5940] FAT-fs (loop3): Directory bread(block 72) failed [ 255.982154][ T5940] FAT-fs (loop3): Directory bread(block 73) failed [ 259.818475][ T4253] kernel write not supported for file /vcs1 (pid: 4253 comm: kworker/1:6) [ 260.368377][ T5992] loop1: detected capacity change from 0 to 256 [ 260.484617][ T5992] FAT-fs (loop1): Directory bread(block 64) failed [ 260.501001][ T5992] FAT-fs (loop1): Directory bread(block 65) failed [ 260.526404][ T5992] FAT-fs (loop1): Directory bread(block 66) failed [ 260.553943][ T5992] FAT-fs (loop1): Directory bread(block 67) failed [ 260.566714][ T5992] FAT-fs (loop1): Directory bread(block 68) failed [ 260.599012][ T5992] FAT-fs (loop1): Directory bread(block 69) failed [ 260.615411][ T5992] FAT-fs (loop1): Directory bread(block 70) failed [ 260.632785][ T5992] FAT-fs (loop1): Directory bread(block 71) failed [ 260.643024][ T5992] FAT-fs (loop1): Directory bread(block 72) failed [ 260.673647][ T5992] FAT-fs (loop1): Directory bread(block 73) failed [ 262.921814][ T6006] gfs2: path_lookup on c::;øN€…L‰´¶;o$: returned error -2 [ 264.000241][ T6013] kAFS: No cell specified [ 264.214412][ T6019] xt_recent: Unsupported userspace flags (000000de) [ 266.559203][ T6039] loop3: detected capacity change from 0 to 164 [ 266.571182][ T6042] loop1: detected capacity change from 0 to 256 [ 267.553254][ T6042] FAT-fs (loop1): Directory bread(block 64) failed [ 267.614377][ T6042] FAT-fs (loop1): Directory bread(block 65) failed [ 267.645375][ T6042] FAT-fs (loop1): Directory bread(block 66) failed [ 267.680012][ T6042] FAT-fs (loop1): Directory bread(block 67) failed [ 267.686923][ T6042] FAT-fs (loop1): Directory bread(block 68) failed [ 267.693508][ T6042] FAT-fs (loop1): Directory bread(block 69) failed [ 267.700385][ T6042] FAT-fs (loop1): Directory bread(block 70) failed [ 267.771950][ T6042] FAT-fs (loop1): Directory bread(block 71) failed [ 267.779447][ T6042] FAT-fs (loop1): Directory bread(block 72) failed [ 267.792490][ T6042] FAT-fs (loop1): Directory bread(block 73) failed [ 267.910474][ T6055] loop2: detected capacity change from 0 to 512 [ 267.918952][ T6057] bridge0: port 3(syz_tun) entered blocking state [ 267.945602][ T6057] bridge0: port 3(syz_tun) entered disabled state [ 267.959763][ T6057] device syz_tun entered promiscuous mode [ 267.966671][ T6057] bridge0: port 3(syz_tun) entered blocking state [ 267.973651][ T6057] bridge0: port 3(syz_tun) entered forwarding state [ 268.037773][ T6058] netlink: 'syz.4.499': attribute type 10 has an invalid length. [ 268.237011][ T6055] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c198, mo2=0002] [ 268.248501][ T6058] bridge0: port 3(syz_tun) entered disabled state [ 268.255141][ T6058] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.263660][ T6058] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.316344][ T6055] System zones: 1-12 [ 268.881815][ T6058] bridge0: port 3(syz_tun) entered blocking state [ 268.888436][ T6058] bridge0: port 3(syz_tun) entered forwarding state [ 268.896769][ T6058] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.903985][ T6058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.911431][ T6058] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.918592][ T6058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.949545][ T6058] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 268.964119][ T6055] EXT4-fs error (device loop2): ext4_iget_extra_inode:4566: inode #15: comm syz.2.498: corrupted in-inode xattr [ 269.005601][ T6055] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.498: couldn't read orphan inode 15 (err -117) [ 269.085142][ T6055] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,minixdf,noblock_validity,lazytime,noauto_da_alloc,block_validity,init_itable=0x0000000000000009,debug,usrjquota=,nolazytime,norecovery,,errors=continue. Quota mode: none. [ 269.177456][ T6055] EXT4-fs warning (device loop2): dx_probe:833: inode #2: comm syz.2.498: Unrecognised inode hash code 4 [ 269.190689][ T6055] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.498: Corrupt directory, running e2fsck is recommended [ 269.918219][ T4818] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 270.215002][ T4818] Bluetooth: hci1: Injecting HCI hardware error event [ 270.224796][ T4191] Bluetooth: hci1: hardware error 0x00 [ 273.654810][ T4935] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 274.592038][ T6103] fuse: Bad value for 'fd' [ 275.675566][ T6111] loop1: detected capacity change from 0 to 40427 [ 275.749094][ T6111] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 275.757265][ T6111] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 275.774470][ T6111] F2FS-fs (loop1): invalid crc value [ 275.867767][ T6111] F2FS-fs (loop1): Found nat_bits in checkpoint [ 275.999715][ T6111] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 276.007562][ T6111] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 278.504285][ T6147] gfs2: path_lookup on c::;øN€…L‰´¶;o$: returned error -2 [ 279.379873][ T6156] loop4: detected capacity change from 0 to 164 [ 281.355154][ T4224] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 281.644917][ T4224] usb 5-1: Using ep0 maxpacket: 32 [ 282.156017][ T4224] usb 5-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 282.207643][ T4224] usb 5-1: config 0 interface 0 has no altsetting 0 [ 282.218048][ T4224] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 282.827110][ T4224] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.005463][ T4224] usb 5-1: config 0 descriptor?? [ 283.022027][ T6189] loop1: detected capacity change from 0 to 128 [ 283.037222][ T6189] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 283.072193][ T6189] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 283.402427][ T6192] loop2: detected capacity change from 0 to 40427 [ 283.455524][ T6192] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 283.463904][ T6192] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 283.494190][ T6192] F2FS-fs (loop2): invalid crc value [ 283.593612][ T4224] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 283.619797][ T4224] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 283.635059][ T4224] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 283.636132][ T6192] F2FS-fs (loop2): Found nat_bits in checkpoint [ 283.741677][ T4224] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 283.750167][ T6192] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 283.752419][ T4224] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 283.757382][ T6192] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 285.346987][ T4224] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 285.364619][ T4224] hid-picolcd 0003:04D8:F002.0002: unknown main item tag 0x0 [ 285.460493][ T4224] hid-picolcd 0003:04D8:F002.0002: No report with id 0xf3 found [ 285.525064][ T4224] hid-picolcd 0003:04D8:F002.0002: No report with id 0xf4 found [ 285.909046][ T4224] usb 5-1: USB disconnect, device number 8 [ 286.292114][ T6210] loop4: detected capacity change from 0 to 40427 [ 286.349123][ T6210] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 286.357212][ T6210] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 286.370602][ T6210] F2FS-fs (loop4): invalid crc value [ 286.503840][ T6210] F2FS-fs (loop4): Found nat_bits in checkpoint [ 286.621162][ T6210] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 286.628895][ T6210] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 287.460376][ T6224] loop1: detected capacity change from 0 to 1024 [ 288.654503][ T6222] device wireguard0 entered promiscuous mode [ 289.481899][ T6226] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 289.492545][ T3091] hfsplus: b-tree write err: -5, ino 4 [ 289.527264][ C0] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 289.546539][ T6226] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 292.153178][ T6254] loop4: detected capacity change from 0 to 164 [ 292.963608][ T6261] loop3: detected capacity change from 0 to 40427 [ 292.970861][ T4224] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 293.218548][ T6261] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 293.226887][ T6261] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 293.236848][ T4224] usb 3-1: Using ep0 maxpacket: 16 [ 293.242461][ T6261] F2FS-fs (loop3): invalid crc value [ 293.301049][ T6261] F2FS-fs (loop3): Found nat_bits in checkpoint [ 293.395552][ T4224] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 293.428727][ T6261] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 293.435933][ T6261] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 298.755475][ T4224] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 298.782563][ T4224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.791273][ T4224] usb 3-1: Product: syz [ 298.795700][ T4224] usb 3-1: Manufacturer: syz [ 298.820495][ T4224] usb 3-1: config 0 descriptor?? [ 298.855521][ T4224] usb 3-1: can't set config #0, error -32 [ 299.149804][ T13] usb 3-1: USB disconnect, device number 4 [ 301.005809][ T6299] bridge0: port 3(syz_tun) entered blocking state [ 301.366045][ T6299] bridge0: port 3(syz_tun) entered disabled state [ 301.392321][ T6299] device syz_tun entered promiscuous mode [ 301.431138][ T6299] bridge0: port 3(syz_tun) entered blocking state [ 301.437721][ T6299] bridge0: port 3(syz_tun) entered forwarding state [ 301.616013][ T6301] netlink: 'syz.2.560': attribute type 10 has an invalid length. [ 301.702092][ T6301] bridge0: port 3(syz_tun) entered disabled state [ 301.708998][ T6301] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.717007][ T6301] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.932733][ T6301] bridge0: port 3(syz_tun) entered blocking state [ 301.939413][ T6301] bridge0: port 3(syz_tun) entered forwarding state [ 301.946713][ T6301] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.953924][ T6301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.961410][ T6301] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.968545][ T6301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.122068][ T6304] loop1: detected capacity change from 0 to 8192 [ 302.130854][ T6301] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 302.270127][ T6304] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 303.438344][ T6325] loop2: detected capacity change from 0 to 256 [ 304.802764][ T6336] mmap: syz.2.572 (6336) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 307.539471][ T6352] device wireguard0 entered promiscuous mode [ 309.357496][ T6372] loop4: detected capacity change from 0 to 40427 [ 309.650584][ T6372] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 309.658606][ T6372] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 309.668745][ T6372] F2FS-fs (loop4): invalid crc value [ 309.758547][ T6381] loop2: detected capacity change from 0 to 64 [ 310.547030][ T6372] F2FS-fs (loop4): Found nat_bits in checkpoint [ 311.567162][ T6372] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 311.574915][ T6372] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 312.676820][ T6396] loop2: detected capacity change from 0 to 32768 [ 312.877383][ T6396] XFS (loop2): Mounting V5 Filesystem [ 313.156317][ T6396] XFS (loop2): Ending clean mount [ 313.165603][ T6396] XFS (loop2): Quotacheck needed: Please wait. [ 314.019124][ T6396] XFS (loop2): Quotacheck: Done. [ 314.257085][ T6411] XFS (loop2): User initiated shutdown received. [ 314.263632][ T6411] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 314.277013][ T6411] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 314.575515][ T4197] XFS (loop2): Unmounting Filesystem [ 318.095000][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.101555][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.704895][ T4934] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 324.764855][ T4934] usb 3-1: Using ep0 maxpacket: 8 [ 324.838787][ T6458] fuse: Bad value for 'fd' [ 325.257584][ T4934] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 325.324891][ T4934] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.587641][ T6462] loop3: detected capacity change from 0 to 40427 [ 325.724831][ T6462] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 325.732775][ T6462] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 325.743103][ T6462] F2FS-fs (loop3): invalid crc value [ 325.764231][ T4934] pvrusb2: Hardware description: Terratec Grabster AV400 [ 325.796215][ T6462] F2FS-fs (loop3): Found nat_bits in checkpoint [ 325.831417][ T4934] pvrusb2: ********** [ 325.836058][ T4934] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 326.023258][ T6462] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 326.030870][ T6462] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 326.519970][ T6472] loop1: detected capacity change from 0 to 40427 [ 326.540294][ T4934] pvrusb2: Important functionality might not be entirely working. [ 327.687405][ T6472] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 327.695772][ T6472] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 327.708419][ T4934] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 327.724410][ T6472] F2FS-fs (loop1): invalid crc value [ 328.850136][ T6472] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-12) [ 329.002777][ T4934] pvrusb2: ********** [ 329.185529][ T2425] pvrusb2: Invalid write control endpoint [ 329.443030][ T4934] usb 3-1: USB disconnect, device number 5 [ 330.425817][ T2425] pvrusb2: Invalid write control endpoint [ 330.435411][ T2425] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 332.246014][ T2425] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 332.533677][ T4818] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 332.583475][ T2425] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 332.854986][ T4818] usb 2-1: Using ep0 maxpacket: 8 [ 333.054883][ T4818] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 333.063958][ T4818] usb 2-1: can't read configurations, error -71 [ 333.150746][ T2425] pvrusb2: Device being rendered inoperable [ 333.338049][ T6509] loop1: detected capacity change from 0 to 40427 [ 333.349092][ T6509] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 333.357072][ T6509] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 333.368524][ T6509] F2FS-fs (loop1): invalid crc value [ 333.406420][ T6509] F2FS-fs (loop1): Found nat_bits in checkpoint [ 333.450328][ T2425] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 333.458893][ T6509] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 333.466677][ T6509] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 333.492562][ T2425] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 333.695958][ T2425] pvrusb2: Attached sub-driver cx25840 [ 333.717584][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 333.735707][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 334.831192][ T6528] loop2: detected capacity change from 0 to 128 [ 334.838956][ T6524] loop4: detected capacity change from 0 to 8192 [ 335.050672][ T6528] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 335.706975][ T6533] loop3: detected capacity change from 0 to 40427 [ 335.759177][ T6524] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 335.852587][ T6533] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 335.860543][ T6533] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 335.875667][ T6533] F2FS-fs (loop3): invalid crc value [ 335.985556][ T6533] F2FS-fs (loop3): Found nat_bits in checkpoint [ 336.082019][ T6533] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 336.089207][ T6533] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 336.117279][ T6539] loop2: detected capacity change from 0 to 256 [ 340.849135][ T6565] loop2: detected capacity change from 0 to 32768 [ 342.307225][ T6576] loop4: detected capacity change from 0 to 128 [ 342.340679][ T6565] XFS (loop2): Mounting V5 Filesystem [ 342.383452][ T6576] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 342.401757][ T6576] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 342.530329][ T6565] XFS (loop2): Ending clean mount [ 342.538967][ T6565] XFS (loop2): Quotacheck needed: Please wait. [ 343.717040][ T6565] XFS (loop2): Quotacheck: Done. [ 344.254887][ T4818] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 344.494899][ T4818] usb 4-1: Using ep0 maxpacket: 8 [ 344.655141][ T4818] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 344.662791][ T4818] usb 4-1: can't read configurations, error -61 [ 344.870641][ T4197] XFS (loop2): Unmounting Filesystem [ 344.974821][ T4818] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 345.234890][ T4818] usb 4-1: Using ep0 maxpacket: 8 [ 345.405000][ T4818] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 345.426335][ T4818] usb 4-1: can't read configurations, error -61 [ 345.453738][ T4818] usb usb4-port1: attempt power cycle [ 352.095751][ T6648] loop2: detected capacity change from 0 to 256 [ 353.164855][ T4232] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 353.528411][ T6656] loop3: detected capacity change from 0 to 32768 [ 353.584979][ T4232] usb 2-1: Using ep0 maxpacket: 8 [ 353.825138][ T4232] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 353.846614][ T4232] usb 2-1: can't read configurations, error -61 [ 353.880400][ T6656] XFS (loop3): Mounting V5 Filesystem [ 354.091374][ T4232] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 354.384960][ T4232] usb 2-1: Using ep0 maxpacket: 8 [ 354.505926][ T6673] loop4: detected capacity change from 0 to 40427 [ 354.535311][ T6656] XFS (loop3): Ending clean mount [ 354.543059][ T6656] XFS (loop3): Quotacheck needed: Please wait. [ 354.601889][ T6656] XFS (loop3): Quotacheck: Done. [ 354.731115][ T4232] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 354.739348][ T4232] usb 2-1: can't read configurations, error -61 [ 354.747627][ T6656] XFS (loop3): User initiated shutdown received. [ 354.754082][ T6656] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 354.768161][ T6656] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 354.836532][ T4232] usb usb2-port1: attempt power cycle [ 354.872412][ T4184] XFS (loop3): Unmounting Filesystem [ 356.253858][ T6673] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 356.262576][ T6673] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 356.306423][ T6673] F2FS-fs (loop4): invalid crc value [ 356.698946][ T6673] F2FS-fs (loop4): Found nat_bits in checkpoint [ 356.786749][ T6673] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 356.794093][ T6673] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 359.824117][ T6701] loop1: detected capacity change from 0 to 256 [ 361.669029][ T6720] loop1: detected capacity change from 0 to 128 [ 362.109525][ T6720] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 362.137292][ T6719] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 363.337709][ T6733] loop3: detected capacity change from 0 to 512 [ 364.566025][ T4818] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 364.685255][ T6733] EXT4-fs (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 364.985003][ T6733] EXT4-fs (loop3): DAX unsupported by block device. [ 365.104870][ T4818] usb 5-1: Using ep0 maxpacket: 8 [ 365.345223][ T4818] usb 5-1: device descriptor read/all, error -71 [ 366.176621][ T6757] loop1: detected capacity change from 0 to 64 [ 366.688139][ T6754] loop4: detected capacity change from 0 to 256 [ 366.890934][ T6762] loop2: detected capacity change from 0 to 32768 [ 366.975639][ T6754] FAT-fs (loop4): Directory bread(block 64) failed [ 367.081538][ T6754] FAT-fs (loop4): Directory bread(block 65) failed [ 367.088826][ T6754] FAT-fs (loop4): Directory bread(block 66) failed [ 367.095781][ T6754] FAT-fs (loop4): Directory bread(block 67) failed [ 367.105121][ T6754] FAT-fs (loop4): Directory bread(block 68) failed [ 367.111723][ T6754] FAT-fs (loop4): Directory bread(block 69) failed [ 367.121366][ T6754] FAT-fs (loop4): Directory bread(block 70) failed [ 367.129113][ T6754] FAT-fs (loop4): Directory bread(block 71) failed [ 367.137292][ T6754] FAT-fs (loop4): Directory bread(block 72) failed [ 367.144170][ T6754] FAT-fs (loop4): Directory bread(block 73) failed [ 367.157351][ T6762] XFS (loop2): Mounting V5 Filesystem [ 367.849210][ T6762] XFS (loop2): Ending clean mount [ 369.651060][ T6762] XFS (loop2): Quotacheck needed: Please wait. [ 369.765061][ T6762] XFS (loop2): Quotacheck: Done. [ 369.834405][ T4197] XFS (loop2): Unmounting Filesystem [ 376.298924][ T6840] loop2: detected capacity change from 0 to 32768 [ 376.936897][ T6840] XFS (loop2): Mounting V5 Filesystem [ 377.065088][ T6840] XFS (loop2): Ending clean mount [ 377.073099][ T6840] XFS (loop2): Quotacheck needed: Please wait. [ 377.135120][ T6840] XFS (loop2): Quotacheck: Done. [ 377.145228][ T6840] XFS (loop2): User initiated shutdown received. [ 377.151715][ T6840] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 377.165076][ T6840] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 377.246301][ T4197] XFS (loop2): Unmounting Filesystem [ 377.307861][ T6860] fuse: Bad value for 'fd' [ 377.671230][ T6862] loop1: detected capacity change from 0 to 40427 [ 378.024833][ T6862] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 378.033137][ T6862] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 378.064865][ T6862] F2FS-fs (loop1): invalid crc value [ 378.270078][ T6870] loop4: detected capacity change from 0 to 40427 [ 378.476456][ T6870] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 378.484293][ T6870] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 378.541914][ T6870] F2FS-fs (loop4): invalid crc value [ 378.553184][ T6862] F2FS-fs (loop1): Found nat_bits in checkpoint [ 378.605612][ T6862] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 378.612765][ T6862] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 378.625612][ T6870] F2FS-fs (loop4): Found nat_bits in checkpoint [ 378.667324][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.674301][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.109817][ T6870] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 380.117408][ T6870] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 381.800857][ T6901] loop2: detected capacity change from 0 to 128 [ 382.239799][ T6901] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 382.261225][ T6900] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 383.089910][ T6917] fuse: Bad value for 'fd' [ 387.889893][ T6953] loop2: detected capacity change from 0 to 128 [ 388.096504][ T6953] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 388.286979][ T6953] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 388.698305][ T6962] fuse: Bad value for 'fd' [ 391.894572][ T6997] loop4: detected capacity change from 0 to 256 [ 394.095034][ T7008] gfs2: path_lookup on c::;øN€…L‰´¶;o$: returned error -2 [ 396.324157][ T7028] loop3: detected capacity change from 0 to 256 [ 396.443728][ T7028] FAT-fs (loop3): Directory bread(block 64) failed [ 396.494490][ T7028] FAT-fs (loop3): Directory bread(block 65) failed [ 396.514988][ T7028] FAT-fs (loop3): Directory bread(block 66) failed [ 396.521697][ T7028] FAT-fs (loop3): Directory bread(block 67) failed [ 396.578882][ T7028] FAT-fs (loop3): Directory bread(block 68) failed [ 396.585685][ T7028] FAT-fs (loop3): Directory bread(block 69) failed [ 396.592594][ T7028] FAT-fs (loop3): Directory bread(block 70) failed [ 396.599570][ T7028] FAT-fs (loop3): Directory bread(block 71) failed [ 396.606432][ T7028] FAT-fs (loop3): Directory bread(block 72) failed [ 396.613280][ T7028] FAT-fs (loop3): Directory bread(block 73) failed [ 399.336342][ T7048] loop3: detected capacity change from 0 to 40427 [ 399.611703][ T7054] loop2: detected capacity change from 0 to 64 [ 399.802926][ T7048] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 399.811154][ T7048] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 399.858997][ T7048] F2FS-fs (loop3): invalid crc value [ 400.341083][ T7048] F2FS-fs (loop3): Found nat_bits in checkpoint [ 400.386625][ T7053] gfs2: path_lookup on c::;øN€…L‰´¶;o$: returned error -2 [ 400.403138][ T7048] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 400.410519][ T7048] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 402.354326][ T7080] loop1: detected capacity change from 0 to 1024 [ 405.061049][ T4277] hfsplus: b-tree write err: -5, ino 4 [ 407.361851][ T7101] loop4: detected capacity change from 0 to 40427 [ 407.450062][ T7101] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 407.458033][ T7101] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 407.488348][ T7101] F2FS-fs (loop4): invalid crc value [ 407.521813][ T7106] gfs2: path_lookup on c::;øN€…L‰´¶;o$: returned error -2 [ 407.546699][ T7101] F2FS-fs (loop4): Found nat_bits in checkpoint [ 407.682186][ T7101] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 407.689562][ T7101] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 412.133266][ T7134] loop3: detected capacity change from 0 to 32768 [ 412.423576][ T7134] XFS (loop3): Mounting V5 Filesystem [ 412.556608][ T7134] XFS (loop3): Ending clean mount [ 412.564039][ T7134] XFS (loop3): Quotacheck needed: Please wait. [ 412.727072][ T7134] XFS (loop3): Quotacheck: Done. [ 414.795504][ T7168] loop1: detected capacity change from 0 to 40427 [ 414.932519][ T7168] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 414.940751][ T7168] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 415.001959][ T7168] F2FS-fs (loop1): invalid crc value [ 415.766743][ T7168] F2FS-fs (loop1): Found nat_bits in checkpoint [ 415.827523][ T7168] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 415.835408][ T7168] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 416.475257][ T7] Bluetooth: hci4: command 0x0405 tx timeout [ 417.197190][ T4817] Bluetooth: hci3: command 0x0409 tx timeout [ 421.262187][ T4184] XFS (loop3): Unmounting Filesystem [ 426.516480][ T7251] loop2: detected capacity change from 0 to 64 [ 427.366210][ T7247] gfs2: path_lookup on c::;øN€…L‰´¶;o$: returned error -2 [ 431.786609][ T7280] loop4: detected capacity change from 0 to 40427 [ 431.937880][ T7280] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 431.945937][ T7280] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 431.958866][ T7280] F2FS-fs (loop4): invalid crc value [ 432.037367][ T7280] F2FS-fs (loop4): Found nat_bits in checkpoint [ 432.375718][ T7280] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 432.382873][ T7280] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 435.920228][ T7307] loop2: detected capacity change from 0 to 164 [ 437.045990][ T7337] device gre0 entered promiscuous mode [ 440.422118][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.429397][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.238251][ T7362] loop2: detected capacity change from 0 to 256 [ 443.777259][ T7385] loop3: detected capacity change from 0 to 512 [ 443.830469][ T7385] EXT4-fs (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 443.866226][ T7385] EXT4-fs (loop3): DAX unsupported by block device. [ 448.203967][ T7434] loop1: detected capacity change from 0 to 512 [ 448.303261][ T7439] loop3: detected capacity change from 0 to 256 [ 448.329130][ T7434] EXT4-fs (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 448.389044][ T7434] EXT4-fs (loop1): DAX unsupported by block device. [ 449.728527][ T7452] syz.0.866 (7452): /proc/7443/oom_adj is deprecated, please use /proc/7443/oom_score_adj instead. [ 452.934367][ T7479] loop2: detected capacity change from 0 to 512 [ 453.061414][ T7479] EXT4-fs (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 453.146332][ T7479] EXT4-fs (loop2): DAX unsupported by block device. [ 455.584823][ T4253] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 455.975004][ T4253] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 456.000819][ T4253] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 456.038583][ T4253] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 456.128209][ T4253] usb 4-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 456.178045][ T4253] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.211225][ T4253] usb 4-1: config 0 descriptor?? [ 456.675391][ T7517] 8021q: VLANs not supported on ip6gre0 [ 456.705471][ T7517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.887'. [ 456.727272][ T4253] hid-u2fzero 0003:10C4:8ACF.0003: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.3-1/input0 [ 456.760572][ T4253] hid-u2fzero 0003:10C4:8ACF.0003: U2F Zero LED initialised [ 456.785609][ T4253] general protection fault, probably for non-canonical address 0xdffffc0000000015: 0000 [#1] PREEMPT SMP KASAN [ 456.797598][ T4253] KASAN: null-ptr-deref in range [0x00000000000000a8-0x00000000000000af] [ 456.806173][ T4253] CPU: 1 PID: 4253 Comm: kworker/1:6 Not tainted syzkaller #0 [ 456.813984][ T4253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 456.824597][ T4253] Workqueue: usb_hub_wq hub_event [ 456.829690][ T4253] RIP: 0010:u2fzero_rng_read+0x256/0x750 [ 456.835470][ T4253] Code: d9 74 12 4c 89 ef e8 d9 b9 4e fa 48 b9 00 00 00 00 00 fc ff df bb a8 00 00 00 4c 89 6c 24 18 49 03 5d 00 48 89 d8 48 c1 e8 03 <80> 3c 08 00 74 08 48 89 df e8 2c ba 4e fa 48 8d 84 24 80 00 00 00 [ 456.857142][ T4253] RSP: 0018:ffffc9000332e7c0 EFLAGS: 00010202 [ 456.863728][ T4253] RAX: 0000000000000015 RBX: 00000000000000a8 RCX: dffffc0000000000 [ 456.872126][ T4253] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff8880261cce69 [ 456.880805][ T4253] RBP: ffffc9000332e978 R08: 0000000000000000 R09: ffff8880261cce2e [ 456.889539][ T4253] R10: dffffc0000000000 R11: ffffed1004c399cd R12: 1ffff1100f5eaa06 [ 456.898254][ T4253] R13: ffff88807af55030 R14: ffff88807af55388 R15: 1ffff92000665d04 [ 456.906572][ T4253] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 456.915636][ T4253] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 456.922508][ T4253] CR2: 000055556ed30a28 CR3: 0000000062d99000 CR4: 00000000003506e0 [ 456.931243][ T4253] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 456.939620][ T4253] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 456.947643][ T4253] Call Trace: [ 456.951070][ T4253] [ 456.954121][ T4253] ? add_early_randomness+0x1e/0x150 [ 456.959546][ T4253] ? u2fzero_brightness_set+0x290/0x290 [ 456.965142][ T4253] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 456.971179][ T4253] ? mutex_lock_io_nested+0x60/0x60 [ 456.976422][ T4253] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 456.982113][ T4253] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 456.988065][ T4253] ? _raw_spin_unlock+0x40/0x40 [ 456.992976][ T4253] ? u2fzero_brightness_set+0x290/0x290 [ 456.998672][ T4253] add_early_randomness+0x7a/0x150 [ 457.003836][ T4253] hwrng_register+0x42d/0x4b0 [ 457.008605][ T4253] devm_hwrng_register+0x43/0xb0 [ 457.013687][ T4253] u2fzero_probe+0x26e/0x2f0 [ 457.018417][ T4253] ? hid_map_usage_clear+0x1d0/0x1d0 [ 457.024370][ T4253] hid_device_probe+0x271/0x360 [ 457.029280][ T4253] ? hid_uevent+0x340/0x340 [ 457.033921][ T4253] really_probe+0x284/0xc80 [ 457.038820][ T4253] __driver_probe_device+0x18c/0x330 [ 457.044153][ T4253] driver_probe_device+0x4f/0x420 [ 457.049481][ T4253] __device_attach_driver+0x2b0/0x500 [ 457.055252][ T4253] ? deferred_probe_work_func+0x230/0x230 [ 457.061551][ T4253] bus_for_each_drv+0x184/0x210 [ 457.066667][ T4253] ? deferred_probe_work_func+0x230/0x230 [ 457.072520][ T4253] ? subsys_find_device_by_id+0x360/0x360 [ 457.078382][ T4253] ? lockdep_hardirqs_on+0x94/0x140 [ 457.083749][ T4253] __device_attach+0x2a8/0x480 [ 457.088737][ T4253] ? device_attach+0x20/0x20 [ 457.093552][ T4253] ? kobject_uevent_env+0x371/0x890 [ 457.098800][ T4253] bus_probe_device+0xbc/0x1e0 [ 457.103725][ T4253] ? device_add+0x97c/0xfb0 [ 457.108423][ T4253] device_add+0xa00/0xfb0 [ 457.112814][ T4253] hid_add_device+0x389/0x530 [ 457.117581][ T4253] usbhid_probe+0xb92/0xf40 [ 457.122231][ T4253] usb_probe_interface+0x5c5/0xb20 [ 457.127490][ T4253] ? usb_register_driver+0x3d0/0x3d0 [ 457.132903][ T4253] really_probe+0x284/0xc80 [ 457.137547][ T4253] __driver_probe_device+0x18c/0x330 [ 457.142871][ T4253] driver_probe_device+0x4f/0x420 [ 457.148027][ T4253] __device_attach_driver+0x2b0/0x500 [ 457.153612][ T4253] ? deferred_probe_work_func+0x230/0x230 [ 457.159882][ T4253] bus_for_each_drv+0x184/0x210 [ 457.164872][ T4253] ? deferred_probe_work_func+0x230/0x230 [ 457.170827][ T4253] ? subsys_find_device_by_id+0x360/0x360 [ 457.176799][ T4253] __device_attach+0x2a8/0x480 [ 457.181602][ T4253] ? kobject_uevent_env+0x371/0x890 [ 457.186942][ T4253] ? device_attach+0x20/0x20 [ 457.191604][ T4253] ? kobject_uevent_env+0x371/0x890 [ 457.197058][ T4253] bus_probe_device+0xbc/0x1e0 [ 457.201881][ T4253] ? device_add+0x97c/0xfb0 [ 457.206700][ T4253] device_add+0xa00/0xfb0 [ 457.211394][ T4253] usb_set_configuration+0x1991/0x1fd0 [ 457.217623][ T4253] usb_generic_driver_probe+0x89/0x150 [ 457.223221][ T4253] usb_probe_device+0x139/0x270 [ 457.228222][ T4253] ? usb_register_device_driver+0x230/0x230 [ 457.234173][ T4253] really_probe+0x284/0xc80 [ 457.238837][ T4253] __driver_probe_device+0x18c/0x330 [ 457.244166][ T4253] driver_probe_device+0x4f/0x420 [ 457.249334][ T4253] __device_attach_driver+0x2b0/0x500 [ 457.254843][ T4253] ? deferred_probe_work_func+0x230/0x230 [ 457.260716][ T4253] bus_for_each_drv+0x184/0x210 [ 457.265784][ T4253] ? deferred_probe_work_func+0x230/0x230 [ 457.271733][ T4253] ? subsys_find_device_by_id+0x360/0x360 [ 457.277785][ T4253] ? lockdep_hardirqs_on+0x94/0x140 [ 457.283143][ T4253] __device_attach+0x2a8/0x480 [ 457.288052][ T4253] ? device_attach+0x20/0x20 [ 457.292813][ T4253] ? kobject_uevent_env+0x371/0x890 [ 457.298153][ T4253] bus_probe_device+0xbc/0x1e0 [ 457.303135][ T4253] ? device_add+0x97c/0xfb0 [ 457.307800][ T4253] device_add+0xa00/0xfb0 [ 457.312415][ T4253] usb_new_device+0xd65/0x1660 [ 457.317441][ T4253] ? lock_chain_count+0x20/0x20 [ 457.322608][ T4253] ? usb_disconnect+0x8a0/0x8a0 [ 457.327512][ T4253] ? _raw_spin_unlock_irq+0x1f/0x40 [ 457.332905][ T4253] ? lockdep_hardirqs_on+0x94/0x140 [ 457.338522][ T4253] hub_event+0x2e4a/0x55e0 [ 457.343302][ T4253] ? hub_post_resume+0x120/0x120 [ 457.348310][ T4253] ? read_lock_is_recursive+0x10/0x10 [ 457.353832][ T4253] ? _raw_spin_unlock_irq+0x1f/0x40 [ 457.359217][ T4253] process_one_work+0x85f/0x1010 [ 457.364428][ T4253] ? worker_detach_from_pool+0x240/0x240 [ 457.370205][ T4253] ? lockdep_hardirqs_off+0x70/0x100 [ 457.375651][ T4253] ? _raw_spin_lock_irq+0xb7/0xf0 [ 457.380734][ T4253] ? _raw_spin_lock_irqsave+0x100/0x100 [ 457.386351][ T4253] ? wq_worker_running+0x97/0x170 [ 457.391596][ T4253] worker_thread+0xaa6/0x1290 [ 457.396623][ T4253] kthread+0x436/0x520 [ 457.400733][ T4253] ? rcu_lock_release+0x20/0x20 [ 457.406027][ T4253] ? kthread_blkcg+0xd0/0xd0 [ 457.410787][ T4253] ret_from_fork+0x1f/0x30 [ 457.415349][ T4253] [ 457.418410][ T4253] Modules linked in: [ 457.435271][ C1] vkms_vblank_simulate: vblank timer overrun [ 457.467415][ T4253] ---[ end trace b44075a48f4321a8 ]--- [ 457.473061][ T4253] RIP: 0010:u2fzero_rng_read+0x256/0x750 [ 457.481236][ T4253] Code: d9 74 12 4c 89 ef e8 d9 b9 4e fa 48 b9 00 00 00 00 00 fc ff df bb a8 00 00 00 4c 89 6c 24 18 49 03 5d 00 48 89 d8 48 c1 e8 03 <80> 3c 08 00 74 08 48 89 df e8 2c ba 4e fa 48 8d 84 24 80 00 00 00 [ 457.505487][ T4253] RSP: 0018:ffffc9000332e7c0 EFLAGS: 00010202 [ 457.511788][ T4253] RAX: 0000000000000015 RBX: 00000000000000a8 RCX: dffffc0000000000 [ 457.523102][ T4253] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff8880261cce69 [ 457.532579][ T4253] RBP: ffffc9000332e978 R08: 0000000000000000 R09: ffff8880261cce2e [ 457.552013][ T4253] R10: dffffc0000000000 R11: ffffed1004c399cd R12: 1ffff1100f5eaa06 [ 457.571725][ T4253] R13: ffff88807af55030 R14: ffff88807af55388 R15: 1ffff92000665d04 [ 457.589426][ T4253] FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 457.602395][ T4253] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 457.609605][ T4253] CR2: 00007f697e8f7000 CR3: 000000002387f000 CR4: 00000000003506e0 [ 457.620382][ T4253] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 457.628850][ T4253] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 457.639840][ T4253] Kernel panic - not syncing: Fatal exception [ 457.646305][ T4253] Kernel Offset: disabled [ 457.650994][ T4253] Rebooting in 86400 seconds..